White paper for Executives, boards & advisory boards
The Training You Cannot Delegate.
NIS2, the German critical-infrastructure act and the EU AI Act side by side: what each demands of the leadership level, what stays delegable, and what has to be on file.
The problem this is about
The trained reflex for every new obligation is to appoint someone, hand over the topic and tick it off. With these three laws it fails, because the person who has to be trained is the one who usually delegates.
Section 38(3) BSIG has required regular management training since 6 December 2025; the critical-infrastructure act has additionally required proof on request since 17 March 2026. Breach triggers liability under company law: down to private assets in a damage case.
What is inside
- The three laws side by side: trigger, start date, addressee and fine ranges in one overview
- The dividing line: what you may hand over, and what stays with you
- Four components of evidence that holds, who by name, at what cadence, on what, with what result
- Why an attendance confirmation reads differently from a passed assessment when it matters
For executives and board members who want to know what they personally owe, before a regulator, an insurer or a court asks.
Download for free
You get the download link right here on this page.
- 11 pages
- As of August 2026
That didn’t work: please check the e-mail address and try again.
We use your address to provide the paper and store it as a prospect contact. No newsletter without the checkbox above. Details: Privacy policy.
Thank you! Here is the paper. The link keeps working later, feel free to save it.
All papers provide general information and are not legal advice.